Cisco ASA Series Cli Configuration Manual page 992

Feature History for Access Rules
!
hostname (config)# object-group service myaclog
hostname (config-service)# service-object tcp source range 2000 3000
hostname (config-service)# service-object tcp source range 3000 3010 destinatio$
hostname (config-service)# service-object ipsec
hostname (config-service)# service-object udp destination range 1002 1006
hostname (config-service)# service-object icmp echo
hostname(config)# access-list outsideacl extended permit object-group myaclog interface
inside any
Feature History for Access Rules
Table 1-2
Table 1-2 Feature History for Access Rules
Feature Name
Interface access rules
Global access rules
Support for Identity Firewall
Support for TrustSec
Cisco ASA Series CLI Configuration Guide
1-10
lists each feature change and the platform release in which it was implemented.
Platform
Releases
7.0(1)
8.3(1)
8.4(2)
9.0(1)
Chapter 1
Feature Information
Controlling network access through the ASA using access
lists.
We introduced the following command: access-group.
Global access rules were introduced.
We modified the following command: access-group.
You can now use identity firewall users and groups for the
source and destination. You can use an identity firewall
ACL with access rules, AAA rules, and for VPN
authentication.
We modified the following commands: access-list
extended.
You can now use TrustSec security groups for the source
and destination. You can use an identity firewall ACL with
access rules.
We modified the following commands: access-list
extended.
Configuring Access Rules